CVE-2009-1049 - SQL injection vulnerability in articleCall.php in Bloginator 1A allows remote attackers to execute arbitrary SQL commands via the id parameter

HIGH

SQL injection vulnerability in articleCall.php in Bloginator 1A allows remote attackers to execute arbitrary SQL commands via the id parameter

Published Mar 24, 2009

7.5

HIGH

CVSS 2.0

EPSS 1.38%

SQL injection vulnerability in articleCall.php in Bloginator 1A allows remote attackers to execute arbitrary SQL commands via the id parameter.

No remediation recorded yet.

Weaknesses (1)

CWE-89

SQL Injection

Link	Providers	Tags
http://osvdb.org/52839		vdb-entryx_refsource_OSVDB
http://secunia.com/advisories/34395		third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://www.securityfocus.com/bid/34187		vdb-entryx_refsource_BID
https://euvd.enisa.europa.eu/vulnerability/EUVD-2009-1050		Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/49325		vdb-entryx_refsource_XF
https://www.exploit-db.com/exploits/8243		exploitx_refsource_EXPLOIT-DB
https://www.exploit-db.com/exploits/8244		exploitx_refsource_EXPLOIT-DB